Post Reply Is the virus gone????
717 cr points
Send Message: Send PM GB Post
Offline
Posted 11/15/17 , edited 11/16/17
A while back crunchyroll got attacked and it would prompt to download a virus onto the computer, or so I've heard. Is this site safe now?

Also, before calling me an idiot for asking this on the supposedly-infected site, I'm viewing Crunchyroll through a Virtual Machine (basically I'm running windows 10 inside windows 10, allowing me to do cool stuff like play around with viruses such as MEMZ or BonziBuddy, or watch very funny cat videos.... but mostly play with viruses)
Dragon
69445 cr points
Send Message: Send PM GB Post
Offline
Posted 11/15/17 , edited 11/16/17

IkusaTakuma wrote:

A while back crunchyroll got attacked and it would prompt to download a virus onto the computer, or so I've heard. Is this site safe now?

Also, before calling me an idiot for asking this on the supposedly-infected site, I'm viewing Crunchyroll through a Virtual Machine (basically I'm running windows 10 inside windows 10, allowing me to do cool stuff like play around with viruses such as MEMZ or BonziBuddy, or watch very funny cat videos.... but mostly play with viruses)


(moved this over to site support)

Yes, I believe that's all been dealt with now, but the site should never, ever automatically download anything as far as I'm aware, so if you see that again, I'd suggest emailing support ([email protected]) immediately so they can deal with the situation.
1379 cr points
Send Message: Send PM GB Post
22 / M / Canada
Offline
Posted 11/16/17 , edited 11/18/17
You're running a virus within a virus, and you're worried about getting a virus?
36809 cr points
Send Message: Send PM GB Post
M
Offline
Posted 11/16/17 , edited 11/16/17
That particular issue is resolved, provided you did not download a file CrunchyViewer.exe. The site was spoofed -- people trying to get to Crunchyroll were redirected by CloudFlare to a fake web site that looked like Crunchyroll, and that asked them to download a file. The file was malware that apparently wasn't too hard to get rid of even if you installed it, but I'm no expert. It's fine now.

This was the official response on November 4th 2017:

https://blog.ellation.com/crunchyroll-com-update-a2a593cf9155
Crunchyroll.com update

At 3:30am PST this morning, malicious individuals gained access and altered our Cloudflare configuration. Cloudflare sits between incoming visitors and Crunchyroll, and normally redirects traffic to Crunchyroll servers. The attackers redirected incoming visitors intended for the Crunchyroll.com website to a non-Crunchyroll-hosted server with the intent for visitors to download a malicious file, named “CrunchyViewer.exe.” This file is malware directly targeting Windows PC web users. We took down the site at 6:00am PST as a precaution and were able to re-secure and restore the correct configuration to our Cloudflare service at 9:00am PST. The Crunchyroll service was fully restored by 9:30am. We’ve identified this as an isolated attack on our Cloudflare layer, and not Crunchyroll itself. As such, our servers were not compromised in any way, and none of our users’ secure information and data was at risk. We take security very seriously, and will pursue this malicious attack on our users to the fullest extent of the law. We will continue to provide updates as we gather more information.

If you were a Windows user who downloaded the malware file from 3:30am to 9:00am PST this morning, it is important to take these steps to remove the malware from your system:

If you downloaded but did not run the file, you are not exposed to the effects of this malware.

Delete “CrunchyViewer.exe” from your file system
As precaution, please perform a scan with an antivirus/anti-malware product

If you downloaded and ran the “CrunchyViewer.exe” application:

Delete “CrunchyViewer.exe” from your file system
Remove the malicious “Java” Run key (You can find Information on how to edit the Windows Registry in the Microsoft support database if you are unfamiliar with the steps)
Open Regedit, and browse to: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Delete the Java key
Remove the malicious binary, by navigating to: %appdata%\Roaming (for example: C:\Users\Yourusername\AppData\Roaming\)
Delete the ‘svchost.exe’ file
Perform a scan with your installed antivirus product

We are providing the above instruction to assist you with the removal of the .exe file. We recommend that you contact Microsoft or other knowledgeable technical support directly for specific questions related to the Windows operating system.

If you have any further questions about your Crunchyroll account, please contact our Customer Support Team: http://www.crunchyroll.com/help?topic=contact
You must be logged in to post.